This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft
File:                     B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft (raw, json)
Hash identifier:          lrLgYPbvmRdc/w03KwmN8MwXBDSRjCxBokX+KQvFqwU=
Subject key identifier:   AA:C2:0D:93:3D:4E:46:B1:2D:BA:73:B7:D5:BD:B7:97:7C:92:72:37
Authority key identifier: B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6
Certificate issuer:       /CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
Certificate serial:       598B282FB34F74248C9188E367C30357497D8015
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft
Manifest number:          0148
Signing time:             Tue 09 Dec 2025 07:54:08 +0000
Manifest this update:     Tue 09 Dec 2025 07:49:08 +0000
Manifest next update:     Sun 14 Dec 2025 19:10:08 +0000
Files and hashes:         1: 3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa (hash: iDyk+TiXFCbj+nnln621ZDV/UgNb8+rpg6axZqO/oLM=)
                          2: B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl (hash: IB6YmGZBEo6IlvjHrZl9e2MH9EMMkpx0gSKuX1FBeKA=)
                          3: 323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa (hash: GA7YN/JvrN/mOd9/Euc6T6r4iImRh6AHHOvP5bHYuJA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 19:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8b:28:2f:b3:4f:74:24:8c:91:88:e3:67:c3:03:57:49:7d:80:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
        Validity
            Not Before: Dec  9 07:49:08 2025 GMT
            Not After : Dec 14 19:10:08 2025 GMT
        Subject: CN=AAC20D933D4E46B12DBA73B7D5BDB7977C927237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:e3:c1:30:a5:b7:70:80:f9:dc:99:6c:14:
                    fa:8c:da:ee:80:b0:71:a4:1e:63:ab:74:f7:b7:e2:
                    11:a5:70:bf:bd:ac:6a:3c:8b:f0:a5:d1:7d:ee:87:
                    d9:9e:f9:9f:b3:ad:22:c9:31:a9:32:b4:f5:1e:e0:
                    c1:9d:95:75:4a:ed:b1:ab:54:59:88:11:c8:3c:64:
                    9e:e8:b7:f3:2c:d2:1b:da:53:a3:14:13:6b:57:cf:
                    70:90:0a:56:8e:0d:52:7f:d1:9a:ac:82:c9:0d:e4:
                    24:5b:e4:db:ce:c8:42:89:e4:f2:c7:09:3d:09:8b:
                    27:27:5d:a2:bb:4d:78:ca:21:7d:57:12:cb:91:5d:
                    6b:d4:ad:f6:7d:ac:e6:75:2f:97:08:43:19:1a:20:
                    a8:b6:f5:02:0c:9d:7f:28:21:f0:03:0f:38:2a:60:
                    cf:54:bc:30:19:6d:f0:42:64:27:75:ee:98:97:79:
                    cc:bf:cb:ed:32:d8:05:11:08:78:52:69:98:af:bb:
                    2e:be:ee:0e:95:d8:e3:58:6f:48:51:8d:cf:05:61:
                    19:64:b3:8e:39:22:f8:fc:0d:c9:48:67:56:a6:cd:
                    2e:99:36:41:d8:23:f5:cf:e9:63:6a:cd:c3:d0:ab:
                    20:a8:c1:2c:0c:50:1b:18:06:ff:eb:52:37:98:6d:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C2:0D:93:3D:4E:46:B1:2D:BA:73:B7:D5:BD:B7:97:7C:92:72:37
            X509v3 Authority Key Identifier:
                keyid:B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:9f:8b:58:a1:25:57:80:4d:dd:e7:e7:46:4b:c7:5a:80:
         ea:aa:c2:47:81:58:a5:98:52:0c:29:40:d1:2d:bb:40:55:ea:
         70:85:3b:53:50:ad:f0:0c:2d:88:b7:33:3a:13:7f:55:92:44:
         e8:95:8f:fc:3f:2d:08:d6:15:d0:a6:13:2a:ca:bb:63:76:0c:
         72:1d:c2:8e:b7:99:18:d5:f1:4e:62:25:72:52:a8:69:01:cd:
         ee:f7:3c:5c:80:e1:3e:2c:c8:8b:99:97:8d:93:25:66:f4:cf:
         83:31:a0:dd:96:de:8a:a1:12:3c:7a:b6:34:ea:a0:9b:8a:77:
         5e:2f:9b:c8:84:4d:76:9f:73:80:b2:e2:b6:40:6b:d9:49:73:
         50:59:63:b1:5f:a4:64:3a:c4:e8:ce:60:ea:b8:3e:df:5c:39:
         42:60:c2:35:d4:6f:13:f5:f8:27:03:1c:cf:fb:ac:54:cf:e7:
         67:79:79:3c:06:5d:6c:56:4e:93:f8:24:e7:05:8c:5e:a3:0c:
         db:0e:81:51:c9:3d:fb:09:74:00:22:d0:28:c3:f5:52:f6:01:
         0b:10:80:e9:d6:8d:be:e0:ea:92:41:2f:2a:46:2f:1d:3e:a4:
         55:ae:4d:c5:25:2c:67:69:04:3a:c3:1b:ea:7a:20:3d:75:50:
         8f:ea:47:c6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWYsoL7NPdCSMkYjjZ8MDV0l9gBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDODY5NUM4QTgxRUY4OUNGOUZBN0I0MkUxNTlFOThB
OEVDMEJCNjAeFw0yNTEyMDkwNzQ5MDhaFw0yNTEyMTQxOTEwMDhaMDMxMTAvBgNV
BAMTKEFBQzIwRDkzM0Q0RTQ2QjEyREJBNzNCN0Q1QkRCNzk3N0M5MjcyMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxuPBMKW3cID53JlsFPqM2u6A
sHGkHmOrdPe34hGlcL+9rGo8i/Cl0X3uh9me+Z+zrSLJMakytPUe4MGdlXVK7bGr
VFmIEcg8ZJ7ot/Ms0hvaU6MUE2tXz3CQClaODVJ/0ZqsgskN5CRb5NvOyEKJ5PLH
CT0JiycnXaK7TXjKIX1XEsuRXWvUrfZ9rOZ1L5cIQxkaIKi29QIMnX8oIfADDzgq
YM9UvDAZbfBCZCd17piXecy/y+0y2AURCHhSaZivuy6+7g6V2ONYb0hRjc8FYRlk
s445Ivj8DclIZ1amzS6ZNkHYI/XP6WNqzcPQqyCowSwMUBsYBv/rUjeYbT4XAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUqsINkz1ORrEtunO31b23l3yScjcwHwYDVR0j
BBgwFoAUuchpXIqB74nPn6e0LhWemKjsC7YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkYxMUQ0NDI2QTM1MkYwRkJFMUQ2N0IyNDQ4MjlFOUQ2
MUFERkQzMDZDRjgwN0ZFRDkyRDUwMTFFNTFFOEM2LzAvQjlDODY5NUM4QTgxRUY4
OUNGOUZBN0I0MkUxNTlFOThBOEVDMEJCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUM4Njk1QzhBODFFRjg5Q0Y5
RkE3QjQyRTE1OUU5OEE4RUMwQkI2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JGMTFENDQyNkEzNTJGMEZCRTFENjdCMjQ0ODI5RTlENjFBREZEMzA2
Q0Y4MDdGRUQ5MkQ1MDExRTUxRThDNi8wL0I5Qzg2OTVDOEE4MUVGODlDRjlGQTdC
NDJFMTU5RTk4QThFQzBCQjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApvZ+LWKElV4BN3efnRkvHWoDq
qsJHgVilmFIMKUDRLbtAVepwhTtTUK3wDC2ItzM6E39VkkTolY/8Py0I1hXQphMq
yrtjdgxyHcKOt5kY1fFOYiVyUqhpAc3u9zxcgOE+LMiLmZeNkyVm9M+DMaDdlt6K
oRI8erY06qCbindeL5vIhE12n3OAsuK2QGvZSXNQWWOxX6RkOsTozmDquD7fXDlC
YMI11G8T9fgnAxzP+6xUz+dneXk8Bl1sVk6T+CTnBYxeowzbDoFRyT37CXQAItAo
w/VS9gELEIDp1o2+4OqSQS8qRi8dPqRVrk3FJSxnaQQ6wxvqeiA9dVCP6kfG
-----END CERTIFICATE-----
Generated at Tue Dec 9 22:34:23 2025 by rpki-client